• No results found

2008:18 Concerns when designing a safeguards approach for the back-end of the Swedish nuclear fuel cycle

N/A
N/A
Protected

Academic year: 2021

Share "2008:18 Concerns when designing a safeguards approach for the back-end of the Swedish nuclear fuel cycle"

Copied!
61
0
0

Loading.... (view fulltext now)

Full text

(1)

Research

SKI Report 2008:18

ISSN 1104-1374

Concerns when designing a safeguards

approach for the back-end of the Swedish

nuclear fuel cycle

Anni Fritzell

March 2006

(2)

SKI:s perspective

Background

Sweden has for many years collected the spent nuclear fuel originating from nuclear power plants. This fuel must at all times be kept under supervision to render a diversion impossible; this is of course due to the possibility to make weapons from the material. One idea is to keep the nuclear material in a repository deep under the ground; this is not only to keep the material safe from theft but also to have a safe long-time storage as respect to the environment. As yet, no country has taken a deep repository in use; therefore, there are no routines for how the safeguarding of the nuclear material will be implemented.

Aim

The aim of this project has been to pick up ideas of how the safeguarding of an encapsulation plant and a deep repository can be facilitated. This is needed in order to give directions to the nuclear facilities on how the material shall be safeguarded.

Results

This report indicates a few different ways of how to safeguard the Swedish material. It also identifies areas where more investigative work remains to be done to get a good basis for decision making.

Continued efforts

The author of this report is continuing her research in the area, aiming at a licentiate thesis. This will hopefully give the authorities more facts on which they can base their decisions. Several research projects and instrument development projects are under way. This is aimed at providing sufficient tools and methods required in the encapsulation plant and the deep repository.

Handling officer

Kåre Axell

Project number

(3)
(4)

Sammanfattning

Det planerade svenska systemet för att hantera det radioaktiva avfall som produceras i kärnkraftreaktorerna bygger på ett slutförvar flera hundra meter ner i berggrunden. I detta ska det använda bränslet placeras, inneslutet i kopparkapslar, varpå slutförvaret fylls igen med sprängsten och lera. Uppförandet av en inkapslingsanläggning och slutförvaret beräknas starta inom tio år. På grund av Sveriges internationella åtaganden om icke-spridning måste det svenska safeguardssystemet utökas till att omfatta även dessa nya anläggningar. Slutförvaret har vissa unika särdrag som ställer safeguardssystemet inför helt nya utmaningar. Dessa särdrag är bland andra den långa tidsrymd som anläggningen är tänkt att innehålla kärnmaterial samt att det material som är placerat i förvaret kommer att vara mycket svårt att få tillgång till. Slutförvarets otillgänglighet innebär att det inte är tänkbart att man kommer att kunna verifiera att dess innehåll är på plats.

I denna rapport presenteras de tekniker som idag finns tillgängliga för uppbyggnaden av ett safeguardssystem för slutstegen i den svenska kärnbränslecykeln. Viktiga aspekter att ta hänsyn till under planering och implementering av safeguardssystemet har undersökts, vilket i vissa fall har lett till en identifiering av områden inom vilka ytterligare utredning kommer att bli nödvändig.

Resultaten inkluderar tre möjliga sätt att införa safeguards i anslutning till inkapsling och slutförvar. Dessa har utvärderats på basis av safeguardsmyndigheternas uppställda krav. Även utveckling och arbete som gjorts i anslutning till safeguardsproblematiken kring slutförvaring av använt kärnbränsle har sammanställts.

Summary

In Sweden, the construction of an encapsulation plant and a geological repository for the final disposal of spent nuclear fuel is planned to start within the next ten years. Due to Sweden’s international agreements on non-proliferation, the Swedish safeguards regime must be extended to include these facilities. The geological repository has some unique features, which present the safeguards system with unprecedented challenges. These features include, inter alia, the long period of time that the facility will contain nuclear material and that the disposed nuclear material will be very difficult to access, implying that physical verification of its presence in the repository is not foreseen.

This work presents the available techniques for creating a safeguards system for the back-end of the Swedish nuclear fuel cycle. Important issues to consider in the planning and implementation of the safeguards system have been investigated, which in some cases has led to an identification of areas needing further research.

The results include three proposed options for a safeguards approach, which have been evaluated on the basis of the safeguards authorities’ requirements. Also, the evolution and present situation of the work carried out in connection to safeguards for geological

(5)
(6)

Research

SKI Report 2008:18

Concerns when designing a safeguards

approach for the back-end of the Swedish

nuclear fuel cycle

Anni Fritzell

Uppsala Universitet Inst.

För kärn och partikelfysik

Box 525

751 20 Uppsala

Sweden

March 2006

This report concerns a study which has been conducted for the Swedish Nuclear Power Inspectorate (SKI). The conclusions and viewpoints presented in the report are those of the author/authors and do not

(7)
(8)

Table of contents

1. Introduction ...1

1.1 Background...1

1.2 Purpose of this work ...1

1.3 Disposition of the work ...2

2. Introduction to nuclear safeguards ...3

2.1 Safeguards – a brief historical account...3

2.2 The present situation...4

2.3 Agreements and safeguards ...4

3. Technical means to fulfil safeguards criteria ...6

3.1 Nuclear material accountancy ...6

3.2 Non-destructive assay...6

3.3 Containment and surveillance ...7

3.4 Design information verification...9

3.5 Monitoring techniques ...9

4. Nuclear safeguards in Sweden ...11

4.1 Operators ...11

4.2 Safeguards authorities...12

5. The Swedish nuclear fuel cycle...15

6. KBS-3 – The Swedish system for managing spent fuel...16

6.1 The barriers...16

6.2 Encapsulation...16

6.3 The repository...17

7. Safeguards and KBS-3...18

7.1 A generic safeguards approach – the encapsulation plant ...18

7.2 A generic safeguards approach – the repository...19

8. Outlines of a Swedish safeguards system that includes encapsulation and the repository ...20

8.1 Prerequisites: Authorities requirements...20

8.2 Nuclear material accountancy at the back-end of the fuel cycle ...21

8.3 Verification by measurement...21

8.4 Containment and surveillance ...24

8.5 Design information verification...25

8.6 Monitoring of the closed repository ...27

8.7 Data handling...28

9. Preliminary proposal on options for Swedish safeguards of the back-end of the fuel cycle ...32

9.1 Option 1 ...33

9.2 Option 2 ...35

9.3 Option 3 ...36

9.4 Safeguards measures common for all options ...37

9.5 Remarks on the various options...38

10. Summary and conclusion...42

11. Acknowledgements...44

(9)
(10)

1. Introduction

1.1 Background

The nuclear politics in Sweden is based on the principle that generations benefiting from the use of nuclear energy also should be responsible of the disposal of the waste in such a way that it will not affect future generations. Sweden was a pioneering country to

implement this concept politically as well as legislatively and plans are in progress on constructing a geological repository for the nuclear waste. Finland has followed the Swedish development and will probably be the first country to implement this idea in practice.

The entire nuclear system is surrounded by a control mechanism, so called safeguards, to ensure the authorities and the public that no nuclear material is lost in the fuel cycle and that knowledge or technology that can be used for non-civilian purposes are not

proliferated. Now, the control needs to be extended to enclose the back-end of the nuclear fuel cycle, which includes the encapsulation plant where the nuclear fuel is prepared for emplacement in the repository, the repository itself and the required transports.

The development of an approach for the safeguards of the repository contains some new challenges as no similar facility has been under safeguards before. The repository presents some unique features where the most important is that the fuel emplaced in the repository is difficult to access and therefore not available for re-verification. This means that there is no way of verifying that the spent fuel actually remains where it should .

The problems surrounding safeguards for activities connected to a geological repository are yet to be solved. The Swedish nuclear power plant operators are responsible for the

construction of the facilities of the back-end of the fuel cycle. The operators jointly own the Swedish Nuclear Fuel Management Company, SKB (Svensk Kärnbränslehantering AB), which is carrying out this obligation. The SKB will submit an application for the

construction of the encapsulation plant in the summer of 2006 to the Swedish Nuclear Power Inspectorate, SKI (Statens Kärnkraftsinspektion), which is the national safeguards authority. To grant the SKB permission to construct the encapsulation plant the SKI needs to make sure that it is possible to safeguard the nuclear material in the facility in a credible way.

1.2

Purpose of this work

The specific design of a nuclear facility is an important factor when developing a safeguards approach for it; certain design features can make it difficult to implement credible safeguards. As an example, the safeguards activities require a certain amount of space, and if that is not provided in the design of the facility the safeguards approach will be compromised. Therefore the SKI and the SKB must agree on designs for the facilities in the back-end of the fuel cycle. These designs should serve the operational purpose of the

(11)

facility and be possible to implement safeguards on. This implies that the objectives of the safeguards must be well defined in order for the authority to be able to draw conclusions about the efficiency of the safeguards implemented onto the facilities.

The purposes of this work were to

- identify issues important to the implementation of safeguards for the encapsulation plant and the geological repository. These issues will be important to consider in the design of the facilities. Also,in trying the application from the SKB to construct these facilities, the SKI must see to that the safeguards issues can be resolved within the proposed design. The issues regard, for instance, how documentation relevant to safeguards should be handled, and how much importance should be placed on measurements of the nuclear material to determine its characteristics. Also, to

-

summarise the present situation of progress and gathered knowledge in the area of safeguards for the back-end of the fuel cycle.

1.3

Disposition of the work

The work was divided in two parts: The first part was to create an overview of the present situation in the area of safeguards of a repository. This included consultations with the central parties involved in handling and safeguarding nuclear material regarding how these parties work in this area, and of how the discussions in the area are evolving. In this part of the work the issues addressed at the workshop arranged by the SKI in Oskarshamn in October 2005 were also included. During the workshop in which representatives from all relevant parties participated, the question of safeguards for the back-end of the fuel cycle was discussed. To create the sought overview extensive literature studies was also necessary.

The second part of the work was to identify important safeguards issues and to investigate how the issues can be considered for an effective implementation of safeguards in the encapsulation plant and the repository.

(12)

2. Introduction to nuclear safeguards

2.1 Safeguards – a brief historical account

The International Atomic Energy Agency, IAEA, plays a key role in the area of safeguards. The IAEA is a related organization to the United Nations, directly subordinated the

Security Council and the General Assembly (see figure 1.). When the IAEA was founded in 1957 it was in a zeitgeist of both expectations and fears of what nuclear technology could bring.

As more countries mastered nuclear technology, concern deepened that they would sooner or later acquire nuclear weapons. In 1964, when the number of countries with nuclear devices had grown to five, it became clear that the IAEA lacked adequate tools to prevent further proliferation. At the same time there was growing support for international, legally binding commitments and comprehensive safeguards to stop the further spread of nuclear weapons and to work towards their eventual elimination. [1]

In response to this situation, the IAEA launched the Treaty on Non-Proliferation of Nuclear Weapons, NPT [2], in 1968. The two main goals of the NPT are to prevent the diversion of fissile material for weapons use through safeguards and to promote cooperation regarding peaceful nuclear technology and equal access to this technology for all States included in the NPT [3]. During the seventies it was clear that the NPT had had a major impact on the handling of nuclear technology in the world. It was accepted by a large number of states, and almost all of the states with direct interest in nuclear technology accepted it. The NPT gave the IAEA the possibility to introduce safeguards and perform inspections in every part of the member states’ fuel cycles.

Figure 1: The United Nations system. Modified from the UN webpage http://www.un.org, March 2006

(13)

During the first decade of its existence the NPT functioned well as a tool for the world community for safeguarding the peaceful use of nuclear technology. In this period the nuclear power industry grew immensely and the IAEA’s responsibilities and importance increased accordingly. In the late 70’s and 80’s however, a number of incidents including the discovery of the nuclear weapon programmes of Iraq and North Korea indicated that the means for the IAEA to do its work were insufficient [1].

2.2 The present situation

The discovery of the fact that member states could maintain a clandestine nuclear weapons programme while being under the IAEA safeguards system raised the question whether the NPT needed to be extended. In 1997 the IAEA Board of Governors approved the

Additional Protocol to Safeguards Agreement [4]. A member state that has agreed to sign the Additional Protocol is extensively evaluated by the IAEA. The quantitative and qualitative evaluation is based on a wide variety of information covering “the state as a whole”.The information arising from Additional Protocol-related activities is evaluated for consistency with all other information relevant to the IAEA and conclusions may be drawn about the safeguards situation in the country. If the information is consistent, integrated

safeguards can be implemented [5]. Integrated safeguards refer to “the optimum

combination of safeguards available to the IAEA under a comprehensive safeguards agreement and an Additional Protocol to achieve maximum effectiveness and efficiency, within available resources, in meeting the IAEA’s safeguards objectives” [6]. Integrated safeguards can include for example unannounced inspections and surveillance. Sweden has signed both the NPT (in 1968) and the Additional Protocol (in 1998) [7]. In May 2005 Sweden was still being evaluated under the Additional Protocol for the possible implementation of integrated safeguards [8].

2.3 Agreements and safeguards

The instruments the IAEA use to carry out its non-proliferation mission are on one hand the agreements with the member states where the states undertake to accept safeguards and to not divert any nuclear material or technology to the making of nuclear weapons. On the other hand, the IAEA perform safeguards activities to check the compliance of the states to the agreements.

The technical objective of safeguards is as follows: “The timely detection of diversion of nuclear material from peaceful nuclear activities to the manufacture of nuclear weapons or of other nuclear explosive devices or for purposes unknown, and deterrence of such diversion by the risk of early detection.” [9] This implies that all significant quantities of nuclear material in a state should be under safeguards, from the uranium ore used to produce the fuel all the way through the nuclear power plant to the final storage. Safeguards should not be confused with nuclear safety or physical protection. Nuclear safety refers to the safety of humans and the biosphere from harmful radiation. Physical

(14)

protection is carried out to prevent the theft of nuclear material by for example terrorists. Safeguards are a system of measures aiming at controlling the state and its intentions with its nuclear material. This system should deter the diversion of nuclear material, and if the state is determined to divert nuclear material to the manufacturing of nuclear weapons, this should be detected with timeliness, i.e. before a nuclear device could be completed. The safeguards activities consist of, inter alia, visits to the nuclear facilities, inventories of nuclear material, investigation of operators’ accountancy for the detection of

inconsistencies and surveillance of the operations in the facilities. Supporting the

verification activities is safeguards technology: Measuring techniques are necessary for the confirmation of the information given about the state’s nuclear activity, surveillance cameras are used to monitor facilities between inspections and seals are used to assure that containments are not secretly breached. The technology is crucial for the credibility of safeguards.

(15)

3. Technical means to fulfil safeguards criteria

The following sections contain brief descriptions of various supportive techniques used in the verifying activities.

3.1 Nuclear material accountancy

Nuclear material accountancy, NMA, has been the cornerstone of the verifying regime of the traditional safeguards system, and will probably remain an important part in the future. NMA is the practice of nuclear material accounting implemented by the operators and other involved parties (the SKI and Euratom in Sweden) to fulfil the safeguards agreements between the state and the IAEA. The IAEA receives the documentation from the operators and perform activities such as inspections, surveillance and non-destructive assay to independently verify that the declared information is correct.

Included in the NMA activities is, inter alia

- the formal division of operations involving nuclear material into material balance areas, MBAs;

- the maintenance of records on the quantities of nuclear material held within each MBA;

- the periodical determination of the quantities of nuclear material present within each MBA through the taking of physical inventory; and

- the provision of a measurement control programme to determine the accuracy of calibrations and measurements and the correctness of recorded data. [10]

3.2 Non-destructive assay

Non-destructive assay, NDA, is used to measure characteristics relevant to safeguards on items of nuclear material. Here, item means virtually any object that has safeguards implications. Typical items considered are spent nuclear fuel assemblies or canisters. The IAEA defines non-destructive assay as “a measurement of the nuclear material content or of the element or isotopic concentration of an item without producing significant physical or chemical changes in the item.” [10]

For safeguards purposes the amount of fissile material in an item is of interest, and especially the concentration of uranium and plutonium, respectively. The integrity of fuel assemblies (in the sense that the assembly has not been disassembled and reconstructed without notice) is also important to verify since such a scenario may indicate diversion of nuclear material. Furthermore, to verify the correctness of operators’ declarations, and spent fuel characteristics like burnout, cooling time and decay heat may be of interest. “To verify” an item is usually defined as to check the compliance of its characteristics with the declarations of the item provided by the operators. The NDA techniques used should be

(16)

Figure 2: The Fork Detector. The prongs are placed around the fuel assembly to be measured. Image from STUK report STUK-YTO-TR 175, 2001

able to provide a possibility to determine fuel characteristics also in cases where declared information is doubtful or even missing altogether [11].

NDA techniques can be divided in quantitative and qualitative techniques. Quantitative techniques are for example gamma spectroscopy, neutron counting and measurements of physical properties such as weight. A subdivision of the quantitative techniques in passive and active analysis can be made. Passive analysis performs measurements based on spontaneous emissions of gamma rays or neutrons while active analysis where the measurements require stimulated emission. An example of active analysis is neutron counters that measure the amount of 235U in an item by inducing fission in it using external neutrons from a neutron source. The neutrons emitted in the fission reactions are then detected, and conclusions may be drawn about the 235U content in the item.

Examples of qualitative techniques are Cerenkov viewing devices and various fuel attribute testers such as S-FAT [12].

The levels of accuracy of the verification are defined by the IAEA. The levels that define amounts of missing material are gross defect, partial defect and bias defect. An NDA method that can detect gross defects in fuel assemblies can determine if the assembly is replaced by a dummy or is missing. A partial defect is defined as the case where 50 percent of the fuel pins in an assembly are missing or

replaced by dummies [13]. The level of bias defect is not defined but is used to describe the small amounts of nuclear material that could be diverted and added up to a significant quantity eventually. The best NDA method approved by the IAEA for safeguards use is at the moment the Fork Detector, FDET [14], (see figure 2) which uses a

combination of gamma and neutron detection to determine fuel characteristics. In an evaluation of the performance of the FDET as a partial defect tester it was concluded, “a general partial defect test cannot be based solely on independent FDET measurements” [15]. This means that at the moment no approved NDA technique can perform a 50 % partial defect test.

3.3 Containment and surveillance

Containment and surveillance, C/S, is used to complement nuclear material accountancy through maintenance of the continuity of knowledge between verifications of the

accountancy. The most common C/S measures are optical surveillance and seals. Optical surveillance is typically used in a storage area to verify that the movements of nuclear material in and out of the area have been performed as declared. Seals are for example used on containers of nuclear material to ensure that no material has been added or removed from the container since the last verification of its contents. Seals are designed so that they

(17)

cannot be removed and replaced without detection, and they can also be used as

identification of the item being sealed. C/S has the advantage that it functions in unattended mode, which is less intrusive on operations, and more cost efficient than inspections. In the following section some definitions with relevance for C/S are presented.

3.3.1 Definitions

Containment

Containments are structural features of a facility, containers or equipment which are used to establish the physical integrity of an area or items (including safeguards equipment or data) and to maintain the continuity of knowledge of the area or items by preventing undetected access to, or movement of, nuclear or other material, or interference with the items. Examples are the walls of a storage room or of a storage pool, transport flasks and storage containers. The continuing integrity of the containment itself is usually assured by seals or surveillance measures (especially for containment penetrations such as doors, vessel lids and water surfaces) and by periodic examination of the containment during inspection. [10]

Surveillance

Surveillance is the collection of information through inspector and/or instrumental observation aimed at detecting movements of nuclear material or other items, and any interference with containment or tampering with safeguards equipment, samples and data. Surveillance may also be used for observing various operations or obtaining relevant operational data. Safeguards inspectors may carry out surveillance assignments continuously or periodically at strategic points. [10]

Dual C/S

A dual C/S system use two independent surveillance or monitoring systems that are based on different principles, implying that there is not a common failure or defeat mode for both systems [13].

Continuity of Knowledge

Continuity of knowledge is kept if the safeguards authorities have knowledge of the amount and location of the nuclear material under safeguards at all times.

Robustness

A robust device or system has the ability to deliver a relevant signal despite of disturbances in its environment. For example, the device or system should be able to perform despite power failures, radiation, tampering attempts, electromagnetic noise etc. Inherent properties such as the quality of the components are also possible “disturbances” whose negative effects should be minimized for robustness.

Assurance and Performance

The performance of a C/S device is describing how well it performs its function in reference to its design requirements. The requirements could be that the device should function in the intended environment, that it is robust (see “Robustness” above), and that it

(18)

can deliver the desired signal. Assurance is all measures made in order to confirm that a device or system has been tested and approved to be compliant with specified standards for both its manufacture and performance.

3.4 Design information verification

The safeguards authorities carry out design information verification, DIV, in order to verify the correctness and completeness of the design information of facilities as declared by the operators. The design information is “information concerning nuclear material subject to safeguards under the agreement and the features of facilities relevant to safeguarding such materials” [16]. This includes the facility layout, the process description, the form, quantity, location and flow of nuclear material being used and the procedures for nuclear material accountancy. An initial DIV is performed on newly built facilities to confirm that the construction is as declared, and thereafter periodically to confirm that no undeclared changes have been made [10]. The DIV is also aiming at finding any design features for which there is no justification and that could be converted for some undeclared purpose [17]. Using the verified design information the safeguards authorities can design the safeguards approach for the plant including key measurement points and determination of material balance areas [10].

3.5 Monitoring techniques

The IAEA convened Advisory Group Meeting on Safeguards Related to Final Disposal of Nuclear Material in Waste and Spent Fuel recommended that safeguards should apply to spent fuel in geological repositories as long as safeguards apply to spent fuel elsewhere, implying that safeguards should be kept as long as the non-proliferation treaty is in force [18]. This means that the spent fuel in deep geological repositories will not be considered irretrievable, but must be monitored to detect any attempts at breaching the containment of the repository. Below are listed techniques that may be possible to use for such monitoring. The possibility to use satellite, environmental and seismic monitoring for safeguards purposes in Finland, which has a climate and bedrock similar to Sweden’s, has been investigated in the STUK report “Safeguards for the geological repository at Olkiluoto in the pre-operational phase” [19], and the following is a summary of what is stated there.

3.5.1 Satellite monitoring

The objective of satellite monitoring of the repository site is to detect any anomalous activities that could be interpreted as attempts to gain access to the closed repository. These activities could be increased traffic, heavy machinery, new facilities, road constructions and large amounts of rock residue from drilling and blasting. To determine if any undeclared changes have been made to the repository site by the use of imaging obtained from satellite monitoring there has to exist a so-called baseline for comparison with the unaffected area. The baseline database consists of especially collected imagery of the repository site: A digital map covering the repository site, information of all buildings, roads and other

(19)

Figure 3: SAR image of Larsen’s shelf, Antarctica, by the Canadian satellite RADARSAT-1. Image from

http://svs.gsfc.nasa.gov

/search/Instrument/SAR.html, March 2006

constructions and optical imagery with high resolution (some decimetres), and a digital elevation model. This information is used to create a three-dimensional model of the repository site. In addition, imagery of the unaffected area produced by the monitoring

equipment to be used should be included in the baseline database. This database will act as a reference to which collected safeguards data will be compared. Optical imagery is not sufficient for safeguards purposes since it cannot record anything relevant during nighttimes when it is dark or when clouds cover the repository site. Infrared imaging that detects thermal occurrences is an option during the night but cannot be used through clouds. Synthetic Aperture Radar, SAR, is an imaging technique functional in all weather conditions. The resolution is a couple of meters (see figure 3), so the SAR monitoring should be complemented with high-resolution optical imagery that can be used when the weather conditions are

appropriate.

3.5.2 Seismic monitoring

The aim of seismic monitoring is to detect any blasting, drilling or boring in the repository area with the purpose to access the spent fuel. When monitoring seismic activity the background noise has to be considered, implying that a seismic noise baseline has to be created before the construction of the repository is commenced. Traffic, industry, wind against buildings and the monitoring equipment itself create the background noise, which is normally concentrated to the working hours. The registrations from seismic monitoring stations could be compared to this baseline to detect any anomalies. Rapid or unannounced changes in the weekly and daily seismic patterns of the repository area can be regarded as attempts to gain access to the repository, which calls for actions by the safeguards

authorities.

3.5.3 Environmental monitoring

Environmental monitoring could be used for safety reasons to detect radioactive particles in the environment adjacent to the repository, which would indicate a failure of the repository barriers. The same monitoring could be utilised for safeguards purposes, in which case an unusually high radiation level could be interpreted as a wilful breaching of the repository containment. Reprocessing activities would also release both volatile radionuclides and radioactive particles. A baseline containing the natural radiation background is needed in this monitoring technique as well as the others. The monitoring is carried out via collection and analysis of environmental samples.

(20)

4. Nuclear safeguards in Sweden

The nuclear safeguards in Sweden are not very well known in the general public although the area involves a large organization including several parties. In this section these parties are briefly presented and their respective responsibilities explained.

The parties involved in safeguarding the Swedish geological repository are:

- The operators of the Swedish nuclear power plants through their jointly owned Swedish Nuclear Fuel Management Company, SKB

- The Swedish Nuclear Power Inspectorate, SKI - The European Union’s safeguards authority, Euratom - The International Energy Agency, IAEA.

4.1 Operators

Swedish legislation enjoins anyone involved in nuclear activities to safely handle and dispose of any nuclear waste from the activity [20]. To carry out this duty the Swedish operators founded the SKB. The SKB owns an interim storage in Oskarshamn, Clab, and a repository for low- and intermediate level waste in Forsmark, the SFR. For transports between the power plants and these storage sites the SKB uses an especially constructed ship, named Sigyn. The SKB is also responsible for the design, construction and operation of the planned geological repository. For the research needed in connection to the

repository the SKB has a laboratory in Oskarshamn called the Äspö laboratory, an underground site where research can be performed in the same environment as the future repository. Finally, the SKB has a capsule laboratory in Oskarshamn where the disposal canisters are developed and tested.

The operators in Sweden, here represented by the SKB, have the firm standpoint that they do not have any responsibility in developing a safeguards approach for the final repository on its own initiative since this is the responsibility of the inspecting authorities Euratom, the IAEA and the SKI. However, the operators have other responsibilities directly connected to safeguards:

ƒ Establishment and operation of a nuclear material accountancy and control system;

ƒ Establishment and maintenance of conditions that are required to facilitate effective use of agreed monitoring, containment and surveillance measures; ƒ Facilitation of access of designated inspectors;

ƒ Facilitation for the authorities to perform their work and monitoring etc. in a credible and rational way;

ƒ Facilitation, on their part, of clarification of any anomaly and inconsistency, and from their part; Insurance that

- the implementation of safeguards is not hampering the economic and tech-nological development or international cooperation in the field of peaceful nuclear activities;

(21)

- the health, safety, physical protection and other security provisions as well as the rights of individuals are respected, and that;

- every precaution is taken to protect commercial, technological and indus-trial secrets.

The SKB will not execute any research or development on safeguards equipment or methods [21]. However, the SKB follows the international development on the area and participate in the international Experts Group on Safeguards for Final Disposal of Spent Fuel in Geological Repositories. The purpose is to keep up to date and to contribute with an operator’s knowledge and point of view.

To facilitate the implementation of safeguards the SKB has made the design of the planned facilities in the back end of the fuel cycle as transparent as possible, and space for

safeguards equipment will be provided [22].

4.2 Safeguards authorities

The structure of the safeguards authorities involved in the Swedish safeguards system is shown in figure 4.

4.2.1 SKI

SKI, the Swedish Nuclear Power Inspectorate, is the national safeguards authority in Sweden. The responsibilities of the SKI are regulated in Swedish law.

As the inspecting authority the SKI is regulating and exercising control on the use of nuclear material in Sweden. Also, the SKI handles tasks concerning safeguards that are placed upon Sweden as a result of the international safeguards agreements or of other

Figure 4: The authorities involved in safeguarding the nuclear material in Sweden

(22)

reasons if it is in a general public interest [20]. In this capacity, the SKI should satisfy itself that all nuclear material in the country is under its control to ensure that no such material will be used in any way opposing the Swedish legislation or Sweden’s international non-proliferation agreements.

Anyone conducting nuclear activities in Sweden has the responsibility by law to ensure that the requirements of the non-proliferation agreements are met [20]. The SKI, as the

inspecting authority, should monitor the operators’ work in meeting these requirements and establish an independent picture of how well this is performed [7]. This means that the SKI does not have any safeguards responsibilities of their own, but that they should supervise the safeguards responsibilities of the operators of the nuclear power plants. However, if the SKI considers it necessary, the inspectorate can place additional national safeguards requirements on the operators.

The SKI is presently prioritising the formulation of national safeguards requirements for the back-end of the Swedish fuel cycle. A part in this work has been the arrangement of the workshop in Oskarshamn in October 2005 where representatives from the IAEA, Euratom, the SKI, SKB and Uppsala University were present. Safeguards issues concerning the back-end of the fuel cycle were discussed.

4.2.2 Euratom

Sweden’s accession to the European Union in 1995 meant that Sweden became a part of the Euratom, the safeguards authority of the European Union. According to the Euratom Treaty [23] the European Commission shall satisfy itself that, in the territory of the member states; ores, source materials and special fissile materials are not diverted from their intended uses as declared by the users. To accomplish this the Commission can, with support from the Euratom treaty and the Euratom regulation no. 302/2005, place upon the operators to establish and maintain a system of accountancy and control of nuclear material from which the Commission can require information, acquire technical data of nuclear installations in the member states and perform on-site inspections.

Also, the Commission shall adopt particular safeguards provisions for each nuclear facility. These provisions shall include material balance areas, key measurement points, measures for containment and surveillance etcetera [24]. Furthermore, the Commission is enjoined by the agreement between the IAEA, Euratom and the states of Euratom to provide the

Agency with the information obtained through its safeguards systems in the Member States [16].

The Euratom is thereby functioning similar to how the national inspecting authorities do in states outside of the EU. That is that it handles the contact with the nuclear facilities in the states and provides the Agency with the operators’ data. The Euratom should also support the Agency’s work in the states [25].

(23)

4.2.3 IAEA

The text of agreement between the states of Euratom, Euratom and the IAEA in connection with the NPT was met in September 1973. The accession of Sweden took place in 1995 after the joining of the European Union. In the agreement it is stated: “The [IAEA], in the light of its statutory responsibilities and its relationship to the General Assembly and the Security Council of the United Nations, has the responsibility to assure the international community that effective safeguards are applied under the treaty” [16]. All data generated by the safeguards systems should be clarified and verified by the IAEA independently so that there is credible assurance of the member states compliance to its safeguards

obligations.

In the implementation of safeguards the IAEA shall take into account the need to: - Avoid hampering the economic and technological development or international cooperation in the field of peaceful nuclear activities;

- respect health, safety, physical protection and other security provisions as well as the rights of individuals, and that;

- take every precaution to protect commercial, technological and industrial secrets. [26] In 1994 the IAEA started the Program for Development of Safeguards for the Final

Disposal of Spent Fuel in Geological Repositories, SAGOR. The objective was to develop a generic safeguards approach that could be used as a reference in the development of site-specific safeguards approaches for future repositories. The report was published in

September 1998. In 1999 the Agency established the Geological Repository Safeguards Experts Group. The group was later named ASTOR (Application of Safeguards to Repositories) and the objective of this group’s meetings was to discuss more practical issues like the use of geophysical techniques and the establishment of baseline knowledge. As an example of how the IAEA is working in the area of safeguards it can be mentioned that Finland is presently conducting a Member State Support Program for the Agency where methods and tools for safeguards of the geological repositories are developed and/or evaluated. The Support Program tasks run between the IAEA and the Member State: the IAEA defines a need, and submits it to those Member States that are supposed to be able to provide an answer. After acceptance of the task proposal, there are regularly working meetings, and progress meetings between the participants (including the IAEA). This interactive way of working enables the IAEA to give feedback to the member states [25, 27].

(24)

Figure 5: Handling of spent fuel in Sweden. Images from the SKB image archive.

5. The Swedish nuclear fuel cycle

The fuel used to generate electric energy in nuclear power plants, NPPs, originates in uranium ore. The ore is firstly mined, then enriched and processed into fuel and later used as a source of energy in the nuclear power plants. Since uranium mining and enrichment is forbidden by Swedish law these services are imported. The fuel for Swedish NPPs is either imported or manufactured in Westinghouse’ fuel factory in Västerås. There are three sites with operating nuclear power plants in Sweden today: Oskarshamn with three boiling water reactors (BWRs), Ringhals with one BWR and three pressure water reactors (PWRs) and Forsmark with three BWRs. Located in Forsmark is also the repository for low- and intermediate level waste, the so called SFR. The locations of all reactor sites are by the shores of Sweden enabling marine transports of high-level waste by the especially designed ship Sigyn.

The Swedish NPPs run in cycles of typically eleven months with a following revision, which takes place during the summer when the energy demand is at its lowest. During the revision the reactor is refuelled and inspected for safety. When a fuel assembly has been irradiated for approximately five cycles it is considered spent and is then removed from the reactor core and replaced with fresh fuel. The spent fuel is cooled in a pool for about one year at the power plant before being transferred to the interim storage Clab, located in Oskarshamn.

The interim storage for high-level waste Clab is an important facility in the Swedish nuclear fuel cycle. Since the start of the Swedish nuclear program in 1971, all irradiated fuel is in storage in Clab awaiting the transfer to a repository. In the end of 2005 more than 4200 tons of spent nuclear fuel was stored in Clab and 300 tons is received annually. After a recent expansion the storage capacity in Clab has increased from approximately 5000 to 8000 tons of spent fuel. When the repository is in operation the spent fuel will be stored for 30-40 years in Clab in order for the radioactivity level and decay heat to decrease before it is transferred to the repository via the encapsulation facility, see figure 5.

(25)

6. KBS-3 – The Swedish system for managing spent fuel

Every producer of nuclear power in Sweden is enjoined by Swedish law to present a scheme for a safe waste disposal [20]. This commitment is performed by the SKB who has been working on several approaches for the disposal of nuclear waste since the 1970’s. The option considered being the most suitable is called KBS-3 and it is the main alternative today. The planning of KBS-3 is well evolved; the research is now in the phase of full-scale testing and pilot experimentation [21].

The KBS-3 model for a final storage of spent fuel is a geological repository located at a depth of 400 – 700 meters in bedrock. The spent fuel will be stored in copper canisters embedded in bentonite clay, which expands greatly when it absorbs water. The bentonite prevents direct water flow onto the canister, and protects it from minor bedrock movements through its deformation. The repository will be sealed when the last canister is in place. Besides the repository the spent fuel handling system will include an encapsulation plant (conditioning facility) and the interim storage Clab. The KBS-3 system is designed to safely keep the radioactive material from the biosphere until the radiation level has reached that of natural uranium ore, which requires a storage time of the order of 100 000 years.

6.1 The barriers

The concept behind KBS-3 is based on three barriers that, even one by one, should be able to protect the environment above ground from radiation. If the first barrier, the copper canister, fails, the buffer (the bentonite clay) should be able to keep the radioactive material from reaching the biosphere. If that barrier too should fail there is still about 500 meters of rock to hinder the transport of radioactive particles. The transportation of particles would be via the transport of water and the transportation speed at the depths planned for the

repository is calculated to be small enough for the radioactive material to not reach the biosphere if the canister and buffer barriers should fail.

6.2 Encapsulation

In the encapsulation plant the fuel assemblies will be placed in copper canisters with cast iron inserts. A lid will be placed on top and the canister will be sealed using friction stir welding1. Before the encapsulation a determination of the decay heat and the content of fissile material should be performed for safety reasons. When the encapsulation plant is in operation it is estimated that 200 canisters should be filled and sealed annually. This means that between 2000 and 3000 fuel assemblies will have to be processed each year. Such an amount places strict requirements on the various safeguards measures used in connection to encapsulation.

1 Friction stir welding is the main alternative for sealing the disposal canisters chosen by the SKB. Information on friction stir welding can be found on the SKB’s website:

(26)

Figure 6: Possible locations of the repository

The main alternative for the location of the encapsulation plant is adjacent to Clab in Oskarshamn. This way, the spent fuel can be transferred directly from the storage pool at Clab to the fuel handling pools in the encapsulation plant. Furthermore, the experience of large-scale fuel handling gained at Clab will be available at both facilities. The other

considered alternative is to locate the encapsulation plant near the repository [21], however, this means that the synergy effects of a location near Clab will not be attained.

6.3 The repository

The repository will be constructed 400-700 meters below ground level. To access the level of the repository where the spent nuclear fuel will be emplaced both a ramp and shafts will be constructed. The disposal canisters will be carried down the ramp in transport casks on trucks. The casks will then be transported into a tunnel where the

emplacement holes have been drilled. The main alternative is presently emplacement in vertical holes drilled in the tunnel floor. (Another option is to drill long horizontal holes in which the disposal canisters will be placed in rows distanced from each other with blocks of bentonite.) These holes will be lined with bentonite clay in which the canisters will be placed. When the last canister of a tunnel is emplaced, the tunnel will be backfilled with a mixture of rock and bentonite and sealed using concrete. The repository will also be backfilled with rock and bentonite after the sealing of the last tunnel.

Numerous site investigations and a few detailed site investigations has narrowed the choice down to two sites suitable for the location of the geological repository, namely in the municipalities of Oskarshamn, near Clab, and Östhammar, near the Forsmark NPP and the SFR [21], see figure 6.

(27)

7. Safeguards and KBS-3

The main purposes of the safeguards system in the different parts and stages of the back-end of the fuel cycle are presented here, and what measures could be used to fulfil these purposes. This work has already to a great extent been done within the SAGOR project, but on a generic level. To be operative, this generic approach has to be evolved into a more specific approach, which is discussed in chapter 8.

7.1 A generic safeguards approach – the encapsulation plant

7.1.1 Design information verification

The design information about the encapsulation plant provided by the operators must be verified in order to credibly rule out any clandestine rooms that could be used as caches or reprocessing areas. During operation the design information verification, DIV, must continue in order to make sure that the facility is operated as declared and that it has not been reconstructed in any way. (See also section 3.4.).

7.1.2 Pre-encapsulation

For safeguards reasons it is important to assure that the information about the nuclear material is correct before the encapsulation since the fuel will not be easily accessible for verification afterwards. This implies that the fuel assembly identity and properties should be verified prior to encapsulation. There may be IAEA requirements that the fuel must be verified at a gross or partial defect level (see section 3.2) before it becomes difficult-to-access, that is, when it is placed in the canister.

7.1.3 Encapsulation and transport to repository

During the encapsulation process a safeguards priority is to get credible assurance that the nuclear material received at the encapsulation plant is encapsulated and leaves the plant in declared disposal canisters. A photograph of the fuel assemblies’ identity numbers when they are emplaced in the canister but before the lid is placed could be taken for the sake of traceability. The canisters should be given a unique identification number to facilitate their tracking from the encapsulation and onwards. A method of “fingerprinting” each canister has been requested [28] using some physical property of the canister and/or its contents that cannot be duplicated or changed, unlike the identification numbers. During transport to the repository an acceptable containment and surveillance system should be applied to maintain the continuity of knowledge. (Definitions of these terms can be found in section 3.3.1)

(28)

7.2 A generic safeguards approach – the repository

7.2.1 Pre-operational phase

The pre-operational phase starts with the decision by a state to construct a geological repository, and ends when the first disposal canister arrives. In this phase of the geological repository DIV is the most important safeguards measure. The absence of any undeclared rooms, tunnels, shafts or other areas must be verified to secure that no reprocessing or diversion activities can be carried out without detection.

7.2.2 Operational phase

The operational phase starts as the first disposal canister with spent fuel arrives and

continues until the final closure of the repository. The main safeguards objective during the operation of the repository is to assure the emplacement of the canisters and that any undeclared removal of nuclear material from the repository is detected. This implies that the canisters should be well monitored from the encapsulation all the way down to the emplacement holes. This is possible due to the identification numbers on the canisters but would be more credible if a fingerprinting method as described in section 7.1.3 could be successfully implemented. DIV should be used to verify the continued correct operation of the repository and to detect any undeclared constructions. Some measures should be taken to make sure that no fuel is moving through the reverse of the material stream, i.e. that no fuel is removed from the repository. C/S measures need to verify that the emplaced nuclear material remains in emplacement until the tunnel is backfilled and sealed.

7.2.3 Post-closure phase

The closed repository should be monitored to detect any attempts to gain access to the repository through drilling and/or blasting. This may be performed by the use of satellite, environmental and seismic monitoring. The information and documentation of the repository relevant to safeguards should be preserved as long as the spent fuel in the repository remains under safeguards so that the continuity of knowledge of the nuclear material is not lost. The preservation of such information over long periods of time is one of the challenges encountered and this issue is further discussed in section 8.7.4.

(29)

8. Outlines of a Swedish safeguards system that includes

encapsulation and the repository

8.1 Prerequisites: Authorities requirements

No formal requirements have yet been formulated for the safeguards system of a geological repository by the safeguards authorities. The most important authority here is the IAEA since the Euratom and SKI requirements cannot be lower than those of the IAEA if they are to have an impact on the safeguards system, since the IAEA requirements must in any circumstance be fulfilled due to the NPT and the safeguards agreements. Although no formal requirements are issued some guidelines have been presented by the IAEA on this area.

A generic requirement is that spent fuel in geologic repositories is subject to safeguards, and that safeguards should be applied on the nuclear material for as long as the safeguards agreements remain in force. Also, on a consultants group meeting in 1995 it was

recommended that spent fuel only would be disposed of as verified nuclear material on which continuity of knowledge (definition in section 3.3.1) has been kept [29].

A definition of the state where continuity of knowledge has been kept has not been

formulated for nuclear material designated for emplacement in a repository. However, it is defined for material designated to become “difficult-to-access”. These requirements could be applicable to the nuclear material in a repository, which will become difficult to access when encapsulated. For items designated difficult-to-access, the following is valid: The evaluation of the maintenance of the continuity of knowledge could be based on an evaluation of the C/S system as a whole, provided that, inter alia

- the nuclear material is verified prior to its becoming difficult-to-access by item counting, item identification (where feasible) and NDA, using sampling plans that provide a high detection probability for gross and partial defects, and dual C/S applied; and

- both the C/S systems are evaluated as “conclusive positive”. Then no re-verification is needed before encapsulation [30]. In contrast, if the attained level of assurance is lower than that of a dual C/S system, the SAGOR group recommended that a gross defect level verification should be performed. This action serves to verify that no item substitution has occurred and that the continuity of knowledge in fact has been kept [13].

The IAEA also states that the safeguards system for a repository should be based on design information verification, (section 8.5) verification of receipts and flow that no nuclear material is removed by any declared or undeclared access routes (section 8.2); and maintenance of continuity of knowledge on the nuclear material content (sections 8.4 and 8.6).

(30)

Finally, the IAEA enjoins the state planning the repository to retain safeguards relevant information and documentation for as long as the nuclear material in the repository remains under safeguards (see section 8.7).

8.2 Nuclear material accountancy at the back-end of the fuel cycle

Nuclear material accountancy, NMA, is in practice in Sweden today but some features of the back-end of the fuel cycle require careful deliberation before the implementation of NMA. The most important feature is that once the fuel is encapsulated in the disposal canisters it will no longer be available for the taking of a physical inventory, or a verifying measurement. The NMA will then refer to the disposal canisters, but once they are

emplaced in the repository they too will become unavailable for inventories. These

shortcomings will be helped by the use of containment and surveillance. The part of NMA including verifying measurements to control the correctness of recorded data also needs consideration: The encapsulation plant is the last place where it is possible to perform a verifying measurement. The circumstances of this aspect are treated further in section 8.3.1 and in chapter 9.

8.3 Verification by measurement

8.3.1 Verification: Why measure?

Experience has shown that correct information about spent fuel assemblies is not always easy retrievable and in some cases the information may even be considered questionable [31]. Therefore a verifying measurement is necessary in order to discover any errors before the fuel is encapsulated since it is difficult to verify the fuel assemblies afterwards. Hence verifying measurements prior to encapsulation is required, both from the operator’s as well as the authorities points of view, for multiple reasons:

x The operators need to ensure that critical conditions never will be reached in the canisters. This aspect has an impact on the safety of the repository.

x The operators need to verify that the total decay heat generated in the canisters remains below a limiting value since heat may seriously affect the buffering prop-erties of the bentonite clay.

x The operators need to verify the integrity (in the sense that the fuel rods or assemblies are undamaged) of the fuel for operational safety reasons. x The safeguards authorities need to verify the identity of the fuel in a credible

manner.

x The safeguards authorities need to verify the accountancy of the fuel assemblies. x The safeguards authorities need to verify that the integrity of the fuel assemblies

is intact to rule out any unnoticed disassembling and following reconstruction. This is important since such a scenario could be a part of a diversion scheme.

(31)

8.3.2 System aspects for verifying measurements

When developing a system for verifying measurements to be used for safeguards purposes a number of considerations have to be made:

a.) Costs are an important factor but in this work it will only be covered indirectly since it is to a large extent depending on the choice of measuring equipment, which is outside the scope of this generic discussion.

b.) Non-intrusiveness is a strict demand on all safeguards measures. c.) The system of verifying measurements must be able to provide relevant

information at the right time.

In the specific situation of performing verifying measurements on spent nuclear fuel prior to its encapsulation, these considerations can be developed further.

Considering a.), the costs, the safeguards authorities need to consider the need for personnel directing the measurements: The encapsulation of spent fuel is a continuous operation. If the safeguards authorities should carry out the verifying measurements they need an inspector on the site full time. This is a very resource demanding solution, and the authorities will probably try to avoid this by enjoining the operators to perform the measurements. This will, however, imply that the data must be authenticated and

transferred to the safeguards authorities with guaranteed confidentiality and integrity (see section 8.7).

For the issue b.) of non-intrusiveness, spatial and temporal considerations are two important features. Regarding the spatial consideration, the measuring stations cannot be allowed to form obstacles for the operation of the facility. This means that any installations required for the measuring stations must be carefully included in the design of the facilities or placed where they do not hinder operations. The time allowed for measurements on fuel assemblies must be short enough to not constitute a bottleneck to operations. A means to avoid such problems is the use of parallel measuring stations working with basically the same task.Altogether a parallel approach would increase redundancy and secure a smooth and efficient processing of the fuel assemblies. For example, if one station fails, another is operative and the processing is not halted. An obvious drawback, however, is increased overall costs.

The third aspect, c.), that the system of verifying measurements must be able to produce the relevant information at the right time must also be considered. This requirement could partly be met by lining up the measuring stations in series. In this way the task of each station can be differentiated both in space and in time. An example of a time dependent application is measurements benefiting from high-intensity radiation that would provide the best performance if it is implemented early in the processing chain.

Another advantage by separating the measuring stations in time is due to the fact that the storage time in Clab extends over several decades in many cases. An implication of this fact is that if an assembly is verified through measurement only directly before encapsulation and it is discovered that the accountancy is incorrect, it might have been forty years since the error was made. In a situation like that it is probably difficult to trace the documentation

(32)

and find the reason for the mistake and to hold anyone responsible for the possibly missing material.

8.3.3 Non-destructive assay

The requirements for NDA techniques to be used for the verifying measurements are based on the need for information prior to encapsulation. In addition, some generic requirements can be placed on the measuring techniques: They should be robust, satisfyingly accurate, have a low failure probability and the measuring time should be as short as possible to avoid intrusion on the operation of the facility.

The measurements should be able to provide information, directly or indirectly, on the content of fissile material, the integrity and the identity of the measured fuel assembly with defined levels of confidence.

When discussing a concept that involves difficult-to-access storing for periods of thousands of years one may anticipate a need for formulating higher standards regarding measuring accuracies, confidence levels and integrity verification (for example down to fuel pin level) than those used presently. For example, it may turn out that verifying only the engraved ID-number of a fuel assembly is not sufficient to get a conclusive identification but must be complemented with a verified match of measured and declared fuel parameters.

NDA techniques that can verify various fuel parameters with accuracies that may be proved to be acceptable already exists [11, 12, 32]. However, as described in section 3.2, there is not yet an NDA technique approved by the IAEA capable of determining a partial defect in a fuel assembly. The information required on the integrity of the fuel can thus not be accessed via the NDA methods presently used by the IAEA.

Partly, this situation can be referred to the design requirements that usually apply to all equipment used at inspections: It should be portable, not very heavy, user friendly etc. In the case of the encapsulation plant the situation is rather different. The NDA measurements should not be performed every three months at inspections, but continuously since 200 canisters should be filled with verified fuel each year during operation. A stationary measurement station is more suited for this frequent usage. Hence, the design requirements of low weight and portability can be relaxed which makes it possible to use new and perhaps more accurate measuring equipment for the NDA verification. New measuring techniques have been proposed to the IAEA for approval [11, 32].These techniques offer, besides results with high accuracy, also the possibility to quantify statistical parameters such that the resulting statements may be assigned a certain confidence.

(33)

8.4 Containment and surveillance

8.4.1 Device requirements

A device used in C/S systems should be robust in the sense that it should be functional in its working environment and have a low probability of a break down. The devices should also have a low “false alarm” frequency to avoid unnecessary and expensive turnouts.

The assurance and performance of a C/S device are important factors to consider when designing a C/S system. High assurance and performance ensures that the desired signal is obtained continuously with sufficientcertainty. Important traits concerning assurance and performance are tampering resistance and possibility to indicate tampering. To make a device tampering resistant it could for example be placed in a containment that is hard to breach. An indication of tampering is a signal to the safeguards authorities that a tampering has occurred. Active seals could be used on C/S devices to obtain the ability of tampering indication. A related quality is the ability for a device to report its status of health to the safeguards authorities so that the possibility to detect breakdowns in devices exists. It is reasonable that the initial stages for designing a safeguards system intended to be applied on the encapsulation facility and the repository should address the above issues. Here it should be possible to benefit on the work within the ESARDA Working Group on Containment and Surveillance, which specifically addresses these issues [33].

8.4.2 System requirements

From a safeguards perspective, the properties of a C/S system are more important than the properties of the separate parts constituting the system; if the system is functioning well, the quality of the components is of subordinate significance. The system should be robust and have a high level of assurance and performance. These qualities could be obtained by using devices that stand up to the demands one by one, but this is not the only option. A functional system could be built even if the available pieces of equipment are not up to code. This is achieved through redundancy: The use of back-up equipment handles the problem with devices that have an unacceptably high probability of a breakdown. And by using devices that functions on different physical properties the probability of a disturbance that defeats the entire system is lowered. (Dual C/S is an example of this strategy.)

The use of redundancy (like dual C/S) also makes undetected diversion less credible in a different way: An optical surveillance system could be fooled by a dummy with the same appearance as a fuel assembly, and a radiation monitoring system could be fooled by a radiation source with similar properties to a fuel assembly. Thus, if a system using both optical surveillance and radiation monitoring is applied it could only be fooled if both the appearance and the radiation signature is duplicated, which is an ambitious project compared to the efforts needed to surpass only one of the systems.

(34)

As for devices, tamper resistance and tamper indication is an important trait for safeguards systems. Also the ability to report the status of health of the system is important so that the safeguards authorities have the possibility to take the proper measures in a timely manner if there should be a problem with the C/S system.

Finally, all credible diversion paths must be covered by the C/S system in order for it to be of significance.

Since methodologies such as automated data interpretation (see section 8.7.3) are emerging, it may be, as in the case of NDA, anticipated higher requirements than presently used also for C/S systems intended for encapsulation and final storage.

8.4.3 C/S system

On a consultants group meeting in 1995 it was recommended that spent fuel only would be disposed of as verified nuclear material on which continuity of knowledge has been kept [29]. The continuity of knowledge can be considered kept if an acceptable C/S system covering all diversion paths has been applied. For spent fuel in disposal canisters (difficult-to-access) designated for emplacement in a repository, dual C/S on all credible diversion paths may provide an acceptable level of assurance that the continuity of knowledge is kept. Such a system has been worked out as a support program to the IAEA by the US Nuclear Regulatory Commission and is enclosed in Annex 1.

Regarding the Swedish project, a question immediately arises from the statement above: what is the meaning of “acceptable”? Can it be quantified? This question and other of generic (and perhaps philosophical) nature call for answers.

8.5 Design information verification

8.5.1 DIV procedures

The SAGOR activity 3 “Design Information Verification” [17] includes a proposed

approach to DIV activities that is summarised in this section. The activities are separated in two types of activities: Informal and formal DIV. This is advantageous since the time available for DIV activities after the completion of the facility may be limited because of the high radiation levels in some parts of the operated facility. The informal DIV is initiated even before construction starts and leaves fewer questions to be answered during the formal DIV.

The informal activities should start as soon as the basic design of the facility is submitted to the regulatory authority for approval in principle. At this point the safeguards authorities should be informed about plant parameters, plant layout, process description, nuclear material accountancy and the operator’s intention to implement their safeguards

Figure

Figure 1: The United Nations system. Modified from the UN  webpage http://www.un.org, March 2006
Figure 2: The Fork Detector. The  prongs are placed around the fuel  assembly to be measured
Figure 3: SAR image of Larsen’s shelf,  Antarctica, by the Canadian satellite  RADARSAT-1
Figure 4: The authorities involved in safeguarding the nuclear material in  Sweden
+7

References

Related documents

a.) Costs are an important factor but in this work it will only be covered indirectly since it is to a large extent depending on the choice of measuring equipment, which is

- there should be a mechanism created through which the relevant parties (operator, safeguards authorities, the IAEA) can give their statements and clearances before the material

Industrial Emissions Directive, supplemented by horizontal legislation (e.g., Framework Directives on Waste and Water, Emissions Trading System, etc) and guidance on operating

VBU delar utredarens bedömning att utgångspunkten i socialtjänstens arbete bör vara vilka insatser som erbjuds och vad insatserna ska syfta till, i stället för nuvarande inriktning

46 Konkreta exempel skulle kunna vara främjandeinsatser för affärsänglar/affärsängelnätverk, skapa arenor där aktörer från utbuds- och efterfrågesidan kan mötas eller

Att förskollärare upplever ett starkare samband mellan Upplevelse av tabun att skilja på kompetenser inom förskolan på arbetsplatsen och Rädsla för att såra påverkar tabun än

Re-examination of the actual 2 ♀♀ (ZML) revealed that they are Andrena labialis (det.. Andrena jacobi Perkins: Paxton & al. -Species synonymy- Schwarz & al. scotica while

Samtidigt som man redan idag skickar mindre försändelser direkt till kund skulle även denna verksamhet kunna behållas för att täcka in leveranser som